Last Updated: June 8, 2026
This Privacy Policy describes how Flax ("we," "our," or "us") collects, uses, stores, and protects information when you use flaxsites.com, the Flax website builder, hosting platform, editor, dashboards, support tools, and related services (the "Service").
Flax is used by site owners to create and operate their own websites. This policy covers the data Flax processes for the Service. Site owners are responsible for telling their own visitors, customers, students, members, staff, and other end users how their website collects and uses personal information, including information handled through Flax-powered forms, checkout, booking, ticketing, course, staff, and point-of-sale features.
When you create or use a Flax account, we collect:
When you build, import, edit, publish, or manage a website with Flax, we collect and store the content and configuration you provide, including:
If you search for, connect, register, or renew domains through Flax, we may collect:
If you connect third-party services, we collect the information needed to provide those integrations, such as:
We use Dodo Payments for Flax subscriptions and checkout. We use Stripe for connected payments, domain checkout, and payment-related workflows where a site owner enables those features. These payment providers may collect payment card details, billing details, tax information, payment method details, and fraud prevention information. Flax does not store full payment card numbers. We store payment and billing metadata such as subscription IDs, checkout session IDs, payment status, pricing IDs, usage counters, billing trigger timestamps, and renewal records.
Flax provides infrastructure that site owners can use to collect or process information from their own visitors and customers. Depending on the features a site owner enables, this may include contact form submissions, messages, file uploads, orders, customer records, delivery details, bookings, attendees, ticket validation records, course access and progress, passes, memberships, staff accounts, scanner access, point-of-sale records, and related communications.
For these user-site features, Flax generally acts as a service provider or processor for the site owner. The site owner controls what they collect and must provide any privacy notices, consents, lawful bases, and retention terms required for their own site.
When you contact us, request support, submit debug packages, or receive service emails, we may collect your contact details, message content, reference IDs, site name, site ID, logs, model snapshots, attachments, and related troubleshooting information.
We collect technical and operational information such as:
We use information to:
Flax uses a mix of managed cloud services, CDN-hosted edge scripts, browser storage, and per-site databases to provide the Service.
Supabase stores account profiles, user sites, site metadata, deployment metadata, invitations, ownership transfers, domain records, domain compliance receipts, Google integration metadata and tokens, information requests, discount codes, usage counters, usage idempotency records, and monthly performance report snapshots. Supabase also provides authentication for Flax accounts.
Published website files, images, assets, template content, support uploads, and CDN-delivered resources may be stored and delivered through Bunny.net. Flax also runs edge scripts on Bunny.net for publishing, forms, checkout, bookings, tickets, domains, integrations, support, and related APIs.
Some user-site features use per-site Bunny Database (libSQL/SQLite-compatible) databases. These databases may store end-user-site data such as customers, orders, order items, tickets, bookings, staff accounts, course access, lesson progress, passes, subscriptions, scanner access, and sync metadata. Site owners should describe those collections in their own privacy policies.
The Flax editor may store drafts, uploaded local images, imported templates, article content, checklist preferences, course access state, UI preferences, and other working data in your browser using local storage, IndexedDB, or similar browser storage until it is published, synchronized, replaced, or cleared.
We share information with service providers and integrations only as needed to provide, secure, support, or improve the Service, or when required by law.
If you are a visitor, customer, student, member, attendee, or staff user of a Flax-powered site, information you provide through that site is made available to the site owner and their authorized users. The site owner's own privacy policy applies to how they use that information.
We may disclose information if required by law, legal process, or valid requests from public authorities; to protect rights, safety, and security; or as part of a merger, acquisition, financing, reorganization, or sale of assets.
Flax operates internationally. Your information may be transferred to, stored in, or processed in countries other than your country of residence, including countries where our infrastructure providers, subprocessors, users, or support staff operate.
Where required for transfers from the European Economic Area, United Kingdom, Switzerland, or other regions with transfer rules, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, data processing agreements, or other lawful transfer mechanisms.
We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business operations.
Depending on your location and your relationship with Flax or a Flax-powered site, you may have rights to access, correct, export, delete, restrict, object to, or withdraw consent for certain processing of your personal information.
If your request relates to a website operated by a Flax customer, please contact that site owner first. We can assist site owners in responding to valid requests where Flax processes data on their behalf.
Residents of the EEA, UK, Switzerland, California, and other regions may have additional rights under applicable laws, including the right to lodge a complaint with a supervisory authority or to opt out of certain disclosures. We do not sell personal information as that term is commonly understood.
To exercise rights for data controlled by Flax, contact us at contact@flaxsites.com. We may need to verify your identity and account relationship before completing a request.
We use technical and organizational measures designed to protect personal information, including:
No method of transmission or storage is completely secure. If you believe there is a security issue with Flax, please contact us at contact@flaxsites.com.
Flax uses cookies, local storage, IndexedDB, and similar technologies for authentication, session management, drafts, editor preferences, security, feature operation, and performance. We do not use third-party advertising cookies on the Flax platform.
Site owners may choose to enable Google Analytics, Google Maps, embedded content, payment tools, course access, checkout, booking, or other features on their published sites. Those features may set cookies or collect data according to the site owner's configuration and the applicable third-party provider's terms and privacy policy.
The Flax Service is not directed to children under 16. We do not knowingly collect personal information from children through Flax accounts. If you believe a child has provided personal information directly to Flax, contact us and we will take appropriate steps.
Flax-powered sites may be used by site owners for classes, events, courses, youth programs, or other offerings. Site owners are responsible for complying with laws that apply to children, students, parents, guardians, and participants on their own sites.
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last Updated" date. For material changes, we may also notify users by email or through the Service.
If you have questions, concerns, requests, or privacy-related notices for Flax, contact us at:
Email: contact@flaxsites.com
For requests about a Flax-powered site that you do not own, please contact the site owner directly first.